Description of problem: /usr/kerberos/bin/ksu permissions are wrong preventing ksu from doing anything useful at all (aborts with an error). It is currently root:root 755. It should be 4755.